Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4IFMv4Tew7TeSOQBpDQQUVP-bpU.roa
File: 4IFMv4Tew7TeSOQBpDQQUVP-bpU.roa (raw, json)
Hash identifier: UkTgjz6wdRhtZ5VDz80LwsGjYfl1J52sPhXEgV/eJbg=
Subject key identifier: E0:81:4C:BF:84:DE:C3:B4:DE:48:E4:01:A4:34:10:51:53:FE:6E:95
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B57588F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4IFMv4Tew7TeSOQBpDQQUVP-bpU.roa
Signing time: Sat 11 Jun 2022 14:55:03 +0000
ROA not before: Sat 11 Jun 2022 14:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.44.0/22 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190273679 (0xb57588f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 11 14:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0814cbf84dec3b4de48e401a434105153fe6e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:9c:b6:47:52:69:f0:23:16:89:03:84:4e:
25:cb:a7:99:06:6b:af:62:6e:5b:45:79:58:a6:70:
c9:a4:bb:4b:ab:f0:64:e7:d6:74:41:4c:1a:4a:25:
9d:4f:53:4c:db:2c:2f:82:e3:5a:73:d9:7e:3e:3a:
cd:21:58:d7:c9:74:c9:c5:b7:8e:9a:21:87:87:63:
00:df:c4:bc:ba:00:0f:ae:71:3c:b4:db:54:17:25:
3b:5f:57:24:8e:eb:9a:d0:81:21:36:6c:e4:cf:0b:
48:c6:4f:da:d0:7f:b7:59:f9:2a:99:28:83:d6:50:
72:12:47:c0:75:85:6f:3b:64:f9:aa:65:21:e1:ed:
e2:1e:de:8d:45:d2:79:5b:07:4c:a7:60:ba:72:7d:
c1:8f:b7:52:ce:e9:15:5c:7d:10:b0:49:0b:28:54:
5b:e8:4d:c9:04:bf:97:ce:00:0f:0c:b1:b9:41:e8:
de:55:79:35:2d:51:a1:f7:df:96:5e:be:6d:35:ce:
89:f3:52:31:00:2d:af:6d:a1:15:d8:56:b5:97:9b:
2e:b6:3a:bc:2e:a2:62:97:1d:1b:3a:54:10:92:14:
26:79:0f:7f:a6:8b:a7:c6:f0:1e:10:5a:db:67:3c:
4b:79:06:36:c3:59:32:4e:70:8e:50:c6:83:48:41:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:4C:BF:84:DE:C3:B4:DE:48:E4:01:A4:34:10:51:53:FE:6E:95
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4IFMv4Tew7TeSOQBpDQQUVP-bpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0/22
89.116.60.0/22
89.117.126.0/24
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:b1:ae:19:f1:61:b8:81:3e:df:db:b9:8d:ab:c6:ac:53:7c:
bb:33:5c:b9:ae:a8:19:1b:93:8b:ae:c3:6a:2a:4e:16:8a:0f:
9c:98:f9:0c:69:99:d5:44:f9:ef:79:18:8e:e0:03:a8:91:4a:
b5:68:53:ce:69:1d:81:a8:2f:15:6e:07:fd:b1:a3:ed:bb:92:
0d:6e:b4:0d:66:c8:a2:3b:38:92:fe:98:ee:17:25:3b:ab:50:
48:88:06:6d:c8:69:96:43:c8:e5:08:a6:8d:b7:48:8e:07:67:
30:e0:8e:89:a0:59:3a:d6:95:c8:27:80:91:c9:11:0b:c1:00:
b0:da:53:e2:d5:c3:aa:f0:2e:98:69:be:30:c5:43:c5:1e:99:
58:22:0c:40:ab:b0:d5:37:40:a9:d1:3d:d7:fb:3e:89:df:d7:
ef:b2:21:81:fa:57:dc:f3:e6:63:94:e9:1f:e3:7a:ea:f1:cc:
6c:3f:93:6a:cf:4d:98:4e:e7:a7:b7:a3:2b:96:e4:17:48:9b:
79:bc:e9:8c:85:83:83:1b:53:48:4e:9e:b8:1c:40:76:45:e0:
50:5d:27:e9:a7:9d:9e:9e:e3:00:0e:a0:b3:90:ca:06:2e:b9:
ef:de:fa:96:66:73:42:9b:35:44:19:5d:db:30:a3:54:e1:f2:
a5:df:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:59 2025 by rpki-client